What principles should the information security analyst apply in order to develop appropriate user training policies for the client? Make sure you address confidentiality, integrity, and availability of information, as well as each of the following:

1 How to determine who would be trained

2 How to determine how often trainings would occur

3 How to determine whether certain staff receive additional training or whether they should be held to higher standards